FVS338 Reference Manual
Page 7
... Uplink 1-3 Extensive Protocol Support 1-3 Easy Installation and Management 1-4 Maintenance and Support 1-5 Package Contents ...1-6 Router Hardware Components 1-6 Router Front Panel 1-6 Router Rear Panel 1-8 Factory Default Login ...1-9 Chapter 2 Connecting the FVS338 to the Internet Connecting the VPN Firewall to Your Network 2-1 Logging in to the VPN Firewall 2-1 Configuring your Internet Connection 2-2 Broadband ISP Settings 2-2 Dialup ISP Serial WAN port Settings 2-4 Setting...
... Uplink 1-3 Extensive Protocol Support 1-3 Easy Installation and Management 1-4 Maintenance and Support 1-5 Package Contents ...1-6 Router Hardware Components 1-6 Router Front Panel 1-6 Router Rear Panel 1-8 Factory Default Login ...1-9 Chapter 2 Connecting the FVS338 to the Internet Connecting the VPN Firewall to Your Network 2-1 Logging in to the VPN Firewall 2-1 Configuring your Internet Connection 2-2 Broadband ISP Settings 2-2 Dialup ISP Serial WAN port Settings 2-4 Setting...
FVS338 Reference Manual
Page 10
...List (CRL 5-36 Chapter 6 Router and Network Management Performance Management 6-1 VPN Firewall Features That Reduce Traffic 6-1 Service Blocking 6-1 Block Sites ...6-3 Source MAC Filtering 6-4 VPN Firewall Features That Increase Traffic 6-4 Port Forwarding 6-4 Port Triggering 6-6 VPN Tunnels ...6-6 Using QoS to Shift...Router 6-18 Enabling the Traffic Meter 6-19 Setting Login Failures and Attacks Notification 6-20 Viewing Port Triggering Status 6-22 Viewing Router Configuration and System Status 6-23 Monitoring WAN Ports Status 6-24 Monitoring VPN Tunnel Connection Status 6-25 VPN ...
...List (CRL 5-36 Chapter 6 Router and Network Management Performance Management 6-1 VPN Firewall Features That Reduce Traffic 6-1 Service Blocking 6-1 Block Sites ...6-3 Source MAC Filtering 6-4 VPN Firewall Features That Increase Traffic 6-4 Port Forwarding 6-4 Port Triggering 6-6 VPN Tunnels ...6-6 Using QoS to Shift...Router 6-18 Enabling the Traffic Meter 6-19 Setting Login Failures and Attacks Notification 6-20 Viewing Port Triggering Status 6-22 Viewing Router Configuration and System Status 6-23 Monitoring WAN Ports Status 6-24 Monitoring VPN Tunnel Connection Status 6-25 VPN ...
FVS338 Reference Manual
Page 11
...Troubleshooting the ISP Connection 7-4 Troubleshooting a TCP/IP Network Using a Ping Utility 7-5 Testing the LAN Path to Your Firewall 7-5 Testing the Path from Your PC to a Remote Device 7-6 Restoring the Default Configuration and Password 7-7 Problems ...Default Settings and Technical Specifications Appendix B System Logs and Error Messages System Log Messages B-1 System Startup ...B-1 Reboot ...B-2 NTP ...B-2 Login/Logout ...B-3 Firewall Restart ...B-3 IPSec Restart ...B-4 WAN Status ...B-4 Auto Rollover ...B-4 PPP Logs ...B-5 Web Filtering and Content Filtering Logs B-7 Traffic ...
...Troubleshooting the ISP Connection 7-4 Troubleshooting a TCP/IP Network Using a Ping Utility 7-5 Testing the LAN Path to Your Firewall 7-5 Testing the Path from Your PC to a Remote Device 7-6 Restoring the Default Configuration and Password 7-7 Problems ...Default Settings and Technical Specifications Appendix B System Logs and Error Messages System Log Messages B-1 System Startup ...B-1 Reboot ...B-2 NTP ...B-2 Login/Logout ...B-3 Firewall Restart ...B-3 IPSec Restart ...B-4 WAN Status ...B-4 Auto Rollover ...B-4 PPP Logs ...B-5 Web Filtering and Content Filtering Logs B-7 Traffic ...
FVS338 Reference Manual
Page 15
...; "Package Contents" on page 1-6 • "Router Hardware Components" on page 1-6 • "Factory Default Login" on time-of-day, Website addresses and address keywords, and share high-speed cable/DSL Internet access for up to a broadband WAN device, such as a cable modem or DSL modem. Chapter 1 Introduction The ProSafe VPN Firewall 50 with 8 port switch connects your...
...; "Package Contents" on page 1-6 • "Router Hardware Components" on page 1-6 • "Factory Default Login" on time-of-day, Website addresses and address keywords, and share high-speed cable/DSL Internet access for up to a broadband WAN device, such as a cable modem or DSL modem. Chapter 1 Introduction The ProSafe VPN Firewall 50 with 8 port switch connects your...
FVS338 Reference Manual
Page 16
...and report attempts to you to control access to defend against hacker attacks. FVS338 ProSafe VPN Firewall 50 Reference Manual • Built in 8-port 10/100 Mbps switch. • Extensive Protocol Support. • Login capability. • SNMP for manageability. • Front panel LEDs for...that you specify as off-limits. • Logs security incidents. A Powerful, True Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS338 is a true firewall, using stateful packet inspection to Internet content by screening for keywords within Web addresses. The...
...and report attempts to you to control access to defend against hacker attacks. FVS338 ProSafe VPN Firewall 50 Reference Manual • Built in 8-port 10/100 Mbps switch. • Extensive Protocol Support. • Login capability. • SNMP for manageability. • Front panel LEDs for...that you specify as off-limits. • Logs security incidents. A Powerful, True Firewall with Content Filtering Unlike simple Internet sharing NAT routers, the FVS338 is a true firewall, using stateful packet inspection to Internet content by screening for keywords within Web addresses. The...
FVS338 Reference Manual
Page 18
... VPNC-compliant VPN routers and clients. • SNMP. This feature eliminates the need to run a login program such as a DNS server to monitor its own address as EnterNet or WinPOET on the LAN using the Dynamic Host Configuration Protocol (DHCP). The following features simplify installation and management tasks: • Browser-based management. FVS338 ProSafe VPN Firewall 50 Reference...
... VPNC-compliant VPN routers and clients. • SNMP. This feature eliminates the need to run a login program such as a DNS server to monitor its own address as EnterNet or WinPOET on the LAN using the Dynamic Host Configuration Protocol (DHCP). The following features simplify installation and management tasks: • Browser-based management. FVS338 ProSafe VPN Firewall 50 Reference...
FVS338 Reference Manual
Page 23
Factory Default Login FVS338 ProSafe VPN Firewall 50 Reference Manual Check the label on the bottom of the FVS338's enclosure if you forget the following factory default information: • IP Address: http://192.168.1.1 to reach the Web-based GUI from the LAN • User name: admin • Password: password LAN IP Address User Name Password Figure 1-3 To log in to http://192.168.1.1. Enter admin for User Name and password for Password Introduction 1-9 v1.0, March 2009 Figure 1-4 2. Go to the FVS338 once it is connected: 1.
Factory Default Login FVS338 ProSafe VPN Firewall 50 Reference Manual Check the label on the bottom of the FVS338's enclosure if you forget the following factory default information: • IP Address: http://192.168.1.1 to reach the Web-based GUI from the LAN • User name: admin • Password: password LAN IP Address User Name Password Figure 1-3 To log in to http://192.168.1.1. Enter admin for User Name and password for Password Introduction 1-9 v1.0, March 2009 Figure 1-4 2. Go to the FVS338 once it is connected: 1.
FVS338 Reference Manual
Page 25
...FVS338 login screen will display. To log in the address field. Logging in to the VPN Firewall Note: To connect to the firewall, your Resource CD). Chapter 2 Connecting the FVS338 to the Internet This section provides instructions for connecting the VPN firewall, including these topics: • "Connecting the VPN Firewall...Needed)" on page 2-14 Setting up VPN tunnels are covered in Chapter 5, "Virtual Private Networking": Connecting the VPN Firewall to Your Network To physically connect your VPN firewall, refer to the IFVS338 ProSafe VPN Firewall 50 Installation Guide (a copy is also ...
...FVS338 login screen will display. To log in the address field. Logging in to the VPN Firewall Note: To connect to the firewall, your Resource CD). Chapter 2 Connecting the FVS338 to the Internet This section provides instructions for connecting the VPN firewall, including these topics: • "Connecting the VPN Firewall...Needed)" on page 2-14 Setting up VPN tunnels are covered in Chapter 5, "Virtual Private Networking": Connecting the VPN Firewall to Your Network To physically connect your VPN firewall, refer to the IFVS338 ProSafe VPN Firewall 50 Installation Guide (a copy is also ...
FVS338 Reference Manual
Page 26
... standard factory default (see "Changing Passwords and Settings" on page 6-7). The Broadband ISP Settings screen will display. Click Login. Note: See "Enabling Remote Management Access" on Remote management enable. Configuring your Internet connection. 3. The Broadband ISP Settings... Step 1.Select Network Configuration from the main menu and WAN Settings from the WAN Settings menu. FVS338 ProSafe VPN Firewall 50 Reference Manual 2. Figure 2-2 2-2 Connecting the FVS338 to a more information on page 6-10 for the Password, both Broadband ISP Settings and Dialup ISP...
... standard factory default (see "Changing Passwords and Settings" on page 6-7). The Broadband ISP Settings screen will display. Click Login. Note: See "Enabling Remote Management Access" on Remote management enable. Configuring your Internet connection. 3. The Broadband ISP Settings... Step 1.Select Network Configuration from the main menu and WAN Settings from the WAN Settings menu. FVS338 ProSafe VPN Firewall 50 Reference Manual 2. Figure 2-2 2-2 Connecting the FVS338 to a more information on page 6-10 for the Password, both Broadband ISP Settings and Dialup ISP...
FVS338 Reference Manual
Page 27
...the Internet 2-3 v1.0, March 2009 FVS338 ProSafe VPN Firewall 50 Reference Manual 2. The options are described in the following table. Internet connection methods Connection Method PPPoE PPTP BigPond Cable DHCP (Dynamic IP) Fixed IP Data Required Login (Username, Password). No data is ... status. Table 2-1. Login Username, Password), Account Name, and Server IP. When Auto Detect successfully detects an active Internet service, it reports which connection type it discovered. Connecting the FVS338 to verify your Router's MAC address (see "Setting the Router's MAC Address (Advanced...
...the Internet 2-3 v1.0, March 2009 FVS338 ProSafe VPN Firewall 50 Reference Manual 2. The options are described in the following table. Internet connection methods Connection Method PPPoE PPTP BigPond Cable DHCP (Dynamic IP) Fixed IP Data Required Login (Username, Password). No data is ... status. Table 2-1. Login Username, Password), Account Name, and Server IP. When Auto Detect successfully detects an active Internet service, it reports which connection type it discovered. Connecting the FVS338 to verify your Router's MAC address (see "Setting the Router's MAC Address (Advanced...
FVS338 Reference Manual
Page 33
... box. Then, fill in . You may leave this . FVS338 ProSafe VPN Firewall 50 Reference Manual Figure 2-7 Manually Configure WAN1 ISP Settings: Step 1.Does your ISP). If your ISP charges you based on . Connecting the FVS338 to keep the connection always on the amount of IPS connection do you must login. For example: • Austria (PPTP): If your...
... box. Then, fill in . You may leave this . FVS338 ProSafe VPN Firewall 50 Reference Manual Figure 2-7 Manually Configure WAN1 ISP Settings: Step 1.Does your ISP). If your ISP charges you based on . Connecting the FVS338 to keep the connection always on the amount of IPS connection do you must login. For example: • Austria (PPTP): If your...
FVS338 Reference Manual
Page 34
FVS338 ProSafe VPN Firewall 50 Reference Manual - My IP Address: IP address assigned by the ISP or ...will identify the router to the router using DHCP network protocol. 4. If you connect successfully and your network administrator. Server IP Address: IP address of minutes to you have installed login software such as www.google.com, www.netgear.com, etc.... you fill in valid DNS server IP addresses in connectivity problems. 5. If your network administrator. to the NETGEAR Web site. You can also click on the Broadband Status link or the Current IP Address link to the...
FVS338 ProSafe VPN Firewall 50 Reference Manual - My IP Address: IP address assigned by the ISP or ...will identify the router to the router using DHCP network protocol. 4. If you connect successfully and your network administrator. Server IP Address: IP address of minutes to you have installed login software such as www.google.com, www.netgear.com, etc.... you fill in valid DNS server IP addresses in connectivity problems. 5. If your network administrator. to the NETGEAR Web site. You can also click on the Broadband Status link or the Current IP Address link to the...
FVS338 Reference Manual
Page 84
... Profile will increase the size of Event Logs and Alerts The Firewall Logs can view the logs on the Logs screen (see "Setting Block Sites (Content Filtering)" on your LAN; e. hacker probes and Login attempts; Maximum Bandwidth: Specify the maximum bandwidth value in Load ... and then e-mail denial of your network tries to select only those events which are required. 4-30 Firewall Protection and Content Filtering v1.0, March 2009 f. FVS338 ProSafe VPN Firewall 50 Reference Manual d. The Edit Bandwidth Profile screen will be configured to a specified email address.
... Profile will increase the size of Event Logs and Alerts The Firewall Logs can view the logs on the Logs screen (see "Setting Block Sites (Content Filtering)" on your LAN; e. hacker probes and Login attempts; Maximum Bandwidth: Specify the maximum bandwidth value in Load ... and then e-mail denial of your network tries to select only those events which are required. 4-30 Firewall Protection and Content Filtering v1.0, March 2009 f. FVS338 ProSafe VPN Firewall 50 Reference Manual d. The Edit Bandwidth Profile screen will be configured to a specified email address.
FVS338 Reference Manual
Page 86
... full e-mail address (for example, 172.16.1.10). Click the Yes radio box to enable SysLogs and send messages to enable E-mail Logs. FVS338 ProSafe VPN Firewall 50 Reference Manual 5. Check the Yes radio box to the syslog server, then: a. E-mail Server address - Return E-mail Address - If your SMTP...providing the ident service is checked by selecting the authentication type-either Login Plain or CRAM-MD5-based on your SMTP server authenticates users, uncheck the radio box by default. You can configure the firewall to send system logs to cancel your settings. Select the appropriate...
... full e-mail address (for example, 172.16.1.10). Click the Yes radio box to enable SysLogs and send messages to enable E-mail Logs. FVS338 ProSafe VPN Firewall 50 Reference Manual 5. Check the Yes radio box to the syslog server, then: a. E-mail Server address - Return E-mail Address - If your SMTP...providing the ident service is checked by selecting the authentication type-either Login Plain or CRAM-MD5-based on your SMTP server authenticates users, uncheck the radio box by default. You can configure the firewall to send system logs to cancel your settings. Select the appropriate...
FVS338 Reference Manual
Page 136
... 5. Click Apply to save your settings or Cancel to return to save this setting. 6-8 Router and Network Management v1.0, March 2009 Click Apply to your previous login was disrupted (i.e., you require. Select Users from the main menu and Local Authentication from the submenu.... Change the password by checking either the Edit Admin Settings or Edit Guest Settings radio box. 3. Select the Settings you wish to log out). 6. FVS338 ProSafe VPN Firewall 50 ...
... 5. Click Apply to save your settings or Cancel to return to save this setting. 6-8 Router and Network Management v1.0, March 2009 Click Apply to your previous login was disrupted (i.e., you require. Select Users from the main menu and Local Authentication from the submenu.... Change the password by checking either the Edit Admin Settings or Edit Guest Settings radio box. 3. Select the Settings you wish to log out). 6. FVS338 ProSafe VPN Firewall 50 ...
FVS338 Reference Manual
Page 140
...standard HTTP service port 80. Check the Allow Telnet Management radio box. 6-12 v1.0, March 2009 Router and Network Management For greater security, you remotely connect the FVS338 with Internet Explorer 5.5 or higher, simply click Yes to a custom port by running tracert from... the IP address of your browser: https://134.177.0.123:8080 The remote URL login of any common service port. The Remote Management screen will be enabled. Specify the Port Number that number in your FVS338 by entering that will display. 2. FVS338 ProSafe VPN Firewall 50 Reference Manual 2.
...standard HTTP service port 80. Check the Allow Telnet Management radio box. 6-12 v1.0, March 2009 Router and Network Management For greater security, you remotely connect the FVS338 with Internet Explorer 5.5 or higher, simply click Yes to a custom port by running tracert from... the IP address of your browser: https://134.177.0.123:8080 The remote URL login of any common service port. The Remote Management screen will be enabled. Specify the Port Number that number in your FVS338 by entering that will display. 2. FVS338 ProSafe VPN Firewall 50 Reference Manual 2.
FVS338 Reference Manual
Page 146
... login failures and attacks. If you select this option and leave either the Server 1 or Server 2 fields empty, they will be alerted to the Default Netgear NTP servers. 5. You can also enter the address of an NTP Server in the Server 1 Name/IP Address field. FVS338 ProSafe VPN Firewall 50 ... Time radio box. 4. Select a NTP Server option by contacting a Default Netgear NTP Server on the Internet. • Use Custom NTP Servers: If you can also view status information about the firewall, WAN ports, LAN ports, and VPN tunnels. 6-18 v1.0, March 2009 Router and Network Management
... login failures and attacks. If you select this option and leave either the Server 1 or Server 2 fields empty, they will be alerted to the Default Netgear NTP servers. 5. You can also enter the address of an NTP Server in the Server 1 Name/IP Address field. FVS338 ProSafe VPN Firewall 50 ... Time radio box. 4. Select a NTP Server option by contacting a Default Netgear NTP Server on the Internet. • Use Custom NTP Servers: If you can also view status information about the firewall, WAN ports, LAN ports, and VPN tunnels. 6-18 v1.0, March 2009 Router and Network Management
FVS338 Reference Manual
Page 148
FVS338 ProSafe VPN Firewall 50 Reference Manual Figure 6-8 Setting Login Failures and Attacks Notification Figure 6-9 shows the Firewall Logs & E-mail screen that is invoked by clicking View Logs. 6-20 v1.0, March 2009 Router and Network Management You can send a System log of firewall activities to an email address. You can be viewed, saved to a syslog server, and then sent to an email address or a log of the firewall activities can view the logs by selecting Monitoring from the main menu and selecting Firewall Logs & E-mail from the submenu.
FVS338 ProSafe VPN Firewall 50 Reference Manual Figure 6-8 Setting Login Failures and Attacks Notification Figure 6-9 shows the Firewall Logs & E-mail screen that is invoked by clicking View Logs. 6-20 v1.0, March 2009 Router and Network Management You can send a System log of firewall activities to an email address. You can be viewed, saved to a syslog server, and then sent to an email address or a log of the firewall activities can view the logs by selecting Monitoring from the main menu and selecting Firewall Logs & E-mail from the submenu.
FVS338 Reference Manual
Page 161
... is explained in the Web browser. FVS338 ProSafe VPN Firewall 50 Reference Manual • Make sure your PC's IP address is on page 7-7. If your firewall's IP address has been changed and you are using the correct login information. The factory default login name is admin and the password is... Configuration Interface, check the following: • When entering configuration settings, be caching the old configuration. If you can reboot the router and use sniffer to another menu or tab, or your browser has Java, JavaScript, or ActiveX enabled. These auto-generated addresses are...
... is explained in the Web browser. FVS338 ProSafe VPN Firewall 50 Reference Manual • Make sure your PC's IP address is on page 7-7. If your firewall's IP address has been changed and you are using the correct login information. The factory default login name is admin and the password is... Configuration Interface, check the following: • When entering configuration settings, be caching the old configuration. If you can reboot the router and use sniffer to another menu or tab, or your browser has Java, JavaScript, or ActiveX enabled. These auto-generated addresses are...
FVS338 Reference Manual
Page 162
... to your ISP account as www.netgear.com 2. Assign the PC Host Name of the firewall's configuration at http://192.168.1.1 3. Under the Monitoring menu, select Router Status 4. FVS338 ProSafe VPN Firewall 50 Reference Manual Troubleshooting the ISP Connection If your firewall. 3. Turn off power to your firewall is still unable to use the firewall's MAC address; Wait five minutes and...
... to your ISP account as www.netgear.com 2. Assign the PC Host Name of the firewall's configuration at http://192.168.1.1 3. Under the Monitoring menu, select Router Status 4. FVS338 ProSafe VPN Firewall 50 Reference Manual Troubleshooting the ISP Connection If your firewall. 3. Turn off power to your firewall is still unable to use the firewall's MAC address; Wait five minutes and...